Don't Take the Bait
Keep It Classified
Who Goes There?
Policy Power Play
Hollywood Gets Hacked
100
This attack exploits human psychology and behavior to trick people into sharing sensitive information.
What is social engineering?
100
This security measure must always be performed when a CDSS employee steps away from their computer to prevent unauthorized access to sensitive information.
What is locking the screen?
100
This type of access control is granted based on defined business functions, rather than individuals’ identity or seniority.
What is RBAC or Role-Based Access Control?
100
This is a group of policies that everyone must be familiar with.
What are the Core Policies?
100
Keanu Reeves plays Neo, a computer hacker who discovers that his reality is a simulation in this film.
What is The Matrix?
200
A message crafted for one person or group to look real, meant to trick them into giving information.
What is spear phishing?
200
Information that can identify an individual, either by itself or when combined with other information.
What is Personally Identifiable Information (PII)?
200
This fundamental security prinicple states that users and systems should only be granted the minimum necessary access required to perform their specific job functions.
What is the Principle of Least Privilege?
200
CDSS employees can visit this internal resource to find Information Security and Privacy Office (ISPO) policies, procedures, and guidelines.
What is the CDSS Intranet ISPO page?
200
In this 1993 dinosaur blockbuster, a programmer disables the park’s security systems, turning a family attraction into a survival nightmare.
What is Jurassic Park?
300
A text message claims your account is locked and asks you to click a link to restore access. This type of phishing occurs through text messages.
What is smishing?
300
Storing important files on an unlocked computer or phone increases the risk of this kind of incident.
What is a data breach?
300
Security pros recommend these passwords that combine three or four unrelated words, making them strong yet easy to remember.
What are passphrases?
300
This core policy protects CDSS information assets throughout their lifecycle - from creation and collection to destruction and disposal.
What is the Information Asset Protection Policy?
300
This movie’s villainous AI, Skynet, decides humanity is the threat and sends a robotic assassin back in time.
What is The Terminator?
400
Someone calls pretending to be IT support and asks for your password or verification code. This type of phishing uses voice calls.
What is vishing?
400
This cybersecurity discipline focuses on preventing sensitive information from being exposed, leaked, or accessed by unauthorized users, whether intentionally or accidentally.
What is Data Loss Prevention?
400
This security approach combines independent categories of evidence something you know, something you have, or something you are, to reduce the risk of unauthorized access.
What is Multi-Factor Authentication (MFA)?
400
This policy is to establish the requirements for appropriate use and safeguarding of California Department of Social Services (CDSS) information assets.
What is Acceptable Use Policy?
400
Bruce Willis battles cyberterrorists targeting transportation, financial systems, and utilities in this fourth Die Hard movie.
What is Live Free or Die Hard?
500
A type of cybersecurity threat in which attackers create Quick Response codes to redirect victims into visiting or downloading malicious content.
What is Quishing?
500
Verifies user identities using credentials like user IDs, encrypted passwords, passphrases, digital certificates, or multi-factor authentication (MFA).
What is Identification & Authentication?
500
This highly targeted cyberattack often impersonates a CEO or executive to pressure employees into making urgent financial transfers or sharing sensitive data, exploiting the authority and urgency of the message.
What is spear phishing?
500
This policy aims to ensure that all system activity is recorded, monitored, and analyzed to detect potential security incidents, ensure compliance, and support risk management.
What is Audit Logging & Continuous Monitoring Policy?
500
Hugh Jackman plays a hacker recruited by John Travolta for a high-tech heist in this 2001 action thriller.
What is Swordfish?